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Fingerprinting Transmitters: MoTron’s TxID-1 


his month we look at a computer and 

radio product that is quite interesting, 

but at $800 is out of the price range of 
most casual radio listeners. The product, 
TxID-1, by Motron Electronics, claims to be 
able to identify different transmitters using 
the discriminator output of a radio, special- 
ized hardware, and an IBM compatible run- 
ning a DOS signal analysis program. 

How does it “fingerprint” a signal? What 
is required for installation? Does it really 
work? These are a few of the questions we 
will answer; stick with us if you’re curious. 


“ How does it “fingerprint”? 

The principal of TxID’s operation is 
based around the very careful “listening” to 
the first few hundred milliseconds (i.e., mil- 
lionth of a second) when a transmitter is 
turned on. During this early turn-on period 
the signal does not just go from totally off to 
totally on. Rather, it is trying to reach a stable 
“on” state. 

This initial turn-on waveform’s shape 
and amplitude depend on a number of fac- 
tors, including method of frequency genera- 
tion. For example, if a phase lock loop oscil- 
lator circuit is used to generate the 
transmitter’s signal, it has a unique “lock” 
time and lock-up signal. Without getting too 
technical, these are a function of a number of 
factors including the phase lock loop chip that 
is used, the idealized values of the loop com- 
ponents and their interactions, and the actual 
component values taking into account manu- 


Figure I — MoTron’s TxID-1 Hardware 
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facturing tolerances. 

Adding to the individuality of a trans- 
mitter are all the circuits and their compo- 
nents within the signal path to the antenna, 
subsequent to the frequency generating cir- 
cuit. By the way, although in this case we have 
just considered a phase lock loop generator, 
the theory is just as valid for any circuit, be it 
crystal or a simple resistor/capacitor/induc- 
tor oscillator. 

You can imagine that it is a bit of a trick 
to capture, digitize, filter, store, and compare 
the time and amplitude details of this initial 
signal. Motron has chosen a hardware ap- 
proach using a CPU, RAM, EPROM, I/O con- 
trol logic/ports and A/D and D/A converters. 
In short, it is a small, self-contained computer 
system. 

The TxID-1 can also be used to control 
certain ICOM and AOR receivers, decode 
DTMF, CTCSS and DCS signals and control 
an audio tape recorder. However, these fea- 
tures were not tested since we were on the 
trail of a fingerprint! 


* What is installation like? 

TxID-1 consists of a PC Card, which in- 
stalls in a PC, and an Interface Adapter, which 
connects to the PC Card via a connector. See 
Figure 1. The version of TxID-1 we received 
was the TxPorter, specifically made for use 
on laptop computers. This version comes with 
the PC Card installed in a metal box which is 
then connected to the laptop via the parallel 
(printer) port. In addition, 12 volts DC is re- 
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quired to power the card. 

The Interface Box again connects to the 
PC Card, completing the TxPorter mobile/ 
laptop configuration. See Figure 2. 


«> And now, the rest of the story 

That’s not quite the complete installation 
procedure. First, the radio that you will use 
must have a de connection, via a 15K resis- 
tor, to the discriminator output. Since many 
factory-provided discriminator outputs are via 
capacitors for isolation, these require modi- 
fication for use with the TxID-1. Since I was 
using my Yaesu FRG-9600 workhorse, I had 
to run a shielded cable from pin 9 of the dis- 
criminator chip (MC3357) to a little-used rear 
panel connector. 

Aconnection to the receiver’s AGC (au- 
tomatic gain control) line is suggested by 
Motron, but is not essential. Being a 
minimalist, I chose to forgo the AGC con- 
nection hassles. 


 OPAMP.exe — hope you can 
solder! 

The software for TxID-1 comes on a 
floppy and includes a program called 
OPAMP.EXE which is critical for installation 
and setup. Remember the PC card? Well, on 
the PC Card is a 14-pin header, which MUST 
be configured via soldering resistors and 
jumpers. Those of you who cannot solder well 
can go to the last paragraph of the column! 
Careful, neat soldering is a must. 

The input amplifier on the PC Card re- 
quires gain setting depending on the voltage 
swing of your receiver discriminator circuit. 
That’s right: Hope you are also handy with a 
voltmeter. You’re going to need the skill to 
measure the discriminator voltage when a sig- 
nal is 8 kHz above the center frequency, and 
8 kHz below the center frequency. For my 
receiver the swing was from 1.00 to 4.4 volts. 

Armed with this data, running 
OPAMP.exe (in DOS) gives values of two re- 
quired gain-setting resistors and the associ- 
ated header pins for solder. Either a well- 
stocked resistor box or a nearby Radio Shack 
is required. Depending on which direction the 
voltage swings with increasing frequency, the 
soldering of a jumper between pins 7 and 8 
may be required, as was the case for the FRG- 
9600. 

Finally, the discriminator output is con- 


Figure 2— The TxPorter For Mobile Use With 
Laptop Computers 


nected to the interface adapter using shielded 
cable. 


Are we there yet? 

Almost. Since the TxID-1 control soft- 
ware, version 2.95, is DOS based, the ba- 
sic software installation is as easy as copy- 
ing the floppy to the hard drive. However, 
for customization, dig out your old DOS 
book, since modifications of BAT files via 
a text program is required. Although once 
very proficient with these methods, years 
of using Windows have left me DOS brain 
dead! 

So I took the easy way out and used the 
generalized TxPorter.bat file to start the sys- 
tem. I ran the program on a Pentium II 350 
MHz laptop under Windows 98 and had no 
problem with the TxID-1 DOS program. 

There was a bit more calibration proce- 
dure that needed to be performed, but finally 
we were ready to “dust some ‘prints.” 


“ Leaving prints 

I used three different FRS walkie-talk- 
ies for the test. Audiovox made two and the 
third was a Ranger (a WalMart special). All 
were tuned to channel 11 in the 460 MHz 
band. The FRG-9600 was connected to a 
back-of-set whip antenna and placed approxi- 
mately five feet from the FRS units. 
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® Seeing is believing 

Running the TxPorter.bat program displays 
avery simple DOS-type menu screen across the 
top. All the user needs to do is to key a transmit- 
ter and the program goes into action. The left 
side of the screen automatically displays a trace 
of the transmitter’s turn-on signal on the left of 
the screen. Using the menus, the trace can be 
captured, annotated, and then stored in a data- 
base. I did this for each FRS unit three times so 
that variations, such as transmit switch contact 
bounce, could be taken into account. Then I went 
to the compare screen and fired-up unit three, 
the Ranger. 

Immediately, on the right side of the 
screen the new transmission was displayed 
as an overlay of the trace from the database 
which it most closely matched. TxID correctly 
identified it as the Ranger, unit three! 

Even when this test was repeated with 
the two identical Audiovox units, TxID was 
able to pick out Audiovox unit 1 from 
Audiovox unit 2 eight out of ten tries! Based 
on such a small database sampling of only 
six traces (two for each unit) the results were 
excellent. A greater number of sample traces 
for each unit, which the program is capable 
of, would probably have resulted in close to 
a 100% match rate. 

Interestingly, in many cases, the subtle 
difference in traces were not visually appar- 
ent; but TxID found them just fine. 


“- What, no screen shots?! 

So let’s see the results, John. Although I 
tried for a few hours, I cannot show you the 
actual results, since my screen capture pro- 
grams would not work while the TxID DOS 
program was running!! Sorry about that. Fig- 
ure 3 is a drawing of a typical “fingerprint.” 
During the compare routine a second plot ap- 
pears to the right. The real-time captured print, 
from the left, is overlaid with the closest 
match in the database. 


® Finger printing is for real 

This is my first experience with the Motron 
TxID and it has made me a believer. Due to its 
price ($800 for the basic unit and $300 ad- 
ditional for the TxPorter interface) plus the 
electronic measurement requirements, cali- 
bration procedures and soldering expertise, 
TxID is really aimed at a hard-core techni- 
cal few and government agencies. Motron 
suggests one use is to provide positive iden- 
tification of abusers on a repeater system. 
For those of you who have wondered 
about the technology, now you know how 
transmitter fingerprinting works. For 
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Figure 3 — Typical Transmitter “Fingerprint” 


more information, check out Motron’s 
site and other products at http:// 
www.motron.com or write P.O. Box 
2748, Eugene, OR 97402-0280; 1-541- 
687-2118. Grove Enterprises also has the 
Motron TxID for $799.95; check it out 
at http://www.grove-ent.com/dec3.html 
or call 1-800-438-8155. 


® In closing 

For those of you who are medium wave 
insomniacs you may recognize the shortwave 
program link sent to me by Elaine from 
Windham, Maine. The link is http:// 
www.artbell.com/shortwave.html. Check it 
out for frequencies, shortwave on the web and 
other related links. Till next time ... get some 
sleep. 
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